12231 Advocate Aurora Health Corporate - Technical Services and Cyber Security

Full time

Yes

40

This position will be focusing on managing the cloud security team and tools for Advocate Health.

Remote with some limited travel

With minimal direction, oversees the overall security posture and risk management program as it applies to our computing environment for on-premises and cloud-based solutions. Manages the cloud cybersecurity program to include team members, budgets, projects, incidents, legal matters, and compliance efforts. Provides direction to all team members as well as other departments within IT and the organization.

** Remote position with some travel.

MAJOR RESPONSIBILITIES

• Manages the cloud cybersecurity team members to include the systems they maintain and partners with other departments to achieve Enterprise goals.
• Maintains confidentiality, integrity, and availability of the computing environment and enforces the Acceptable Use Policy.
• Manages cybersecurity teammates, and work to improve the maturity of the cloud cybersecurity program. Coordinates work efforts with Privacy, Risk Management, the Legal Department, and law enforcement. Communicates project status to appropriate leadership and appropriate Councils.
• Defines policy, recommends security controls, and provides all-inclusive costs for the implementation and management of cloud cybersecurity solutions enterprise-wide.
• Manages and prepares budgets and seeks input from team members and others during the budgeting process. Evaluates needs, identifies risk, offers recommendations, and manages team members to provide security solutions.
• Assumes designated leader role, where applicable, for the Computer Incident Response Team, communicates incident to senior leaders, and engages team members to respond to the incident.
• Manages adherence to the confidentiality of investigations, incidents, and forensics reviews.
• Provides leadership, guidance, and identifies development opportunities for the cloud cybersecurity team members. Provides cybersecurity training and performs presentations to the enterprise on cybersecurity topics.
• Performs human resources responsibilities for staff which include interviewing and selection of new employees, promotions, staff development, performance evaluations, compensation changes, resolution of employee concerns, corrective actions, terminations, and overall employee morale.
• Develops and recommends operating and capital budgets and controls expenditures within approved budget objectives.
• Responsible for understanding and adhering to the organization's Code of Ethical Conduct and for ensuring that personal actions, and the actions of employees supervised, comply with the policies, regulations, and laws applicable to the organization's business.

MINIMUM EDUCATION AND EXPERIENCE REQUIRED

Level of Education: Bachelor’s degree in information technology or related field

Years of Experience: 5 years in Information Technology, including 3 years of leadership experience in continuous improvement, project management, or a similar role.

MINIMUM KNOWLEDGE, SKILLS AND ABILITIES (KSA)

• Experience with Native and 3rd Party Cloud security tools such as: CNAPP, CWP, MS Defender for Cloud, Palo Alto Prisma Cloud.
• Strong understanding of Cloud platforms such as Azure and AWS
• Understanding of HIPAA and Payment Card Industry Data Security Standards requirements and the ability to communicate risks of not conforming to those requirements required.
• Ability to work at all levels within the organization and effectively communicate to leadership including Senior Leadership.
• Excellent oral and written communication skills.
• Ability to adhere to strict confidentiality and protected health information (PHI) data requirements.
• Proficiency in Excel and PowerPoint, Outlook, Word, and other Office365 applications.

PHYSICAL REQUIREMENTS AND WORKING CONDITIONS

• This position requires travel, therefore, will be exposed to weather and road conditions.
• Operates all equipment necessary to perform the job.
• Exposed to a normal office environment.

This job description indicates the general nature and level of work expected of the incumbent. It is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the incumbent. Incumbent may be required to perform other related duties.